cname_loose/cname_forbid implemented; production timeout